Tideway Community Forum

LMViews

2008-12-15T19:31:24+00:00

Hi,
When we create a view in Tideway say for example:

Host Only:

requires Host where name = ‘abcd’, my understanding is an alert will be triggered everytime any attribute of the Host (as defined in the taxonomy) changes. Is my understanding correct? Also if it is, how can I gather information about the attribute that changed? So if the RAM increased from 512 mb to 1024 mb, when I run the query Search LMView show * will the attribute that changed show up? If my understanding is incorrect, can someone explain how this works?

Regards,
Lalith

Administration Options for port scans

2008-10-10T09:38:55+00:00

How does the Administration -> Options: “Ports to use for initial scan” field correlate to the Administration -> Port Scan Settings list of ports?

I have an appliance that has all the default ports enabled under Administration -> Port Scan Settings, however under Administration -> Options the “Ports to use for initial scan” has been changed from the default and the number of ports reduced.

Does one override the other?

What happens in this case if you enable more ports under Administration -> Port Scan Settings but don’t change the Administration -> Options: “Ports to use for initial scan” field ?

Windows Discovery with RCMD and WMI

2008-10-10T09:34:00+00:00

All Windows hosts under V7 (7.1.5) show last access method being RCMD. When you use the “Summary of Login Methods” Report – again all the Windows hosts are shown as RCMD logins.

However, if you scan the same host using the same slave through a V6 appliance the last login is shown as WMI.

Is this field now referring to the last credential method used rather than the actual access method?

If so – are there any default Summary Login Method Reports showing a split between Windows hosts using RCMD and those using WMI?

Disable running of arbitary commands

2008-10-10T09:40:56+00:00

Under Administration -> Options you have a “Disable running of arbitary commands” field.

What exactly does this relate to?

Does this mean that the Full Discovery script commands will continue to run but that any discovery.runCommand settings in the TPL patterns will not?

If so, what about registry queries and wmi calls within TPL patterns?

DiscoveredWMIQuery Node

2008-10-10T09:37:33+00:00

When running a custom report of “Search DiscoveredWMIQuery“ it returns no results. However, windows discovery has run and WMI data has been returned.

Is this Node therefore only populated by the “extra“ WMI queries that are run through the TPL patterns – hence currently being empty?

Home truths and common questions

2008-03-13T22:00:19+00:00

There are certain things that we take as gospel when we’re building products to run in companies. Are they true?

* Clients have enormous trouble getting ports opened in firewalls. If you’re building a product that needs to talk over a firewall then only one port can be used - and even that’s one too many.
* You never get to sell the product to the end user. The person who approves the sale and chooses the product is usually a high-up who’ll never use the product in anger. How much influence do the people on the ground have in purchasing decisions?

Also, there are some things that we as engineers just don’t know. Any answers?

* How much do the end users actually tend to use these expensive tools they buy?
* How accurate are the CMDBs and asset databases in real-world companies? Do they generally have automated scanning systems feeding them?
* What use is made of the data in the systems, and how often?

What are the main challenges during a scan of small and remote locations/datacenter

2008-02-29T17:31:53+00:00

Do you have a problem making changes to firewall in the enterprise?

What if you see unknown traffic during a scan?

Do you have to scan a large number of desktops to complete your CMDB inventory?